CODEWITHSUNDEEP
azureazure-devopsazure-vm-scale-set
JleruOHeP
JleruOHeP

Reputation: 10376

Azure virtual machine scale set agents public IP

I was following this article - Azure virtual machine scale set agents. Everything is good and I am able to run my custom images to perform builds and deployments.

One thing that is missing there - what if agent needs to access some IP restricted resource? Previously (with a simple VM running as agent) it was easy to whitelist public IP of a given agent. With those scale sets (and --load-balancer "") I am not sure how to get them to use a static IP (preferably only 1 outgoing public IP for all VMs in a set)

Any suggestions?

Upvotes: 0

Views: 1260

Answers (1)

Charles Xu
Charles Xu

Reputation: 31414

When you use a Load Balancer in front of the VMSS with only one static public IP address, then all the VMSS instances only can access outside through that one static public IP address. It's easy to achieve it, you just need to configure the public IP address as static. Then you put that public IP address in the whitelist for the restricted resource.

In this way, all the instances access the restricted resource via the static public IP address and it's in the whitelist.

Upvotes: 1

Related Questions